$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa File: 1b762233-7f62-3510-9b33-8009f4b89308.roa (raw, json) Hash identifier: 8hx7aknVL2wChLo83vrnu8LEXg63t/+NDs00MjS2Blc= Subject key identifier: 5B:AD:FF:35:29:25:15:71:AB:AD:04:9F:5B:0C:39:53:DD:EB:64:43 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EED523D391DF55A09C4CE5400 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 8069 IP address blocks: 20.153.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:3d:39:1d:f5:5a:09:c4:ce:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=5f2fc6c3-2cbd-42a6-9048-c91bc28bd9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:17:a3:ed:21:76:35:2c:78:d5:e8:ca:1d:13: 01:9f:0c:80:9a:09:e5:35:d9:5b:7b:61:d2:5e:53: 6f:52:d4:e4:83:5b:33:bb:9f:28:fa:4e:f1:21:ba: aa:bf:e4:c6:8b:60:66:90:07:41:aa:aa:72:af:08: ec:7d:32:a7:1e:70:83:44:26:7d:82:84:ff:2c:c2: f4:13:b5:25:86:e6:9b:84:cd:42:b5:73:42:71:0a: 4f:7d:8f:70:19:d1:ea:85:34:62:c3:95:82:12:0c: 07:41:c8:1a:7a:72:37:37:ab:1b:ef:a7:cc:82:46: 06:79:91:46:86:90:95:52:04:97:e3:81:44:b1:4c: 24:17:8f:a6:bf:20:fe:d0:af:d5:b3:bd:6f:b7:1e: 1d:be:90:fe:98:c0:b1:63:ce:e2:cd:f3:81:b4:b1: 1d:62:f2:41:08:35:13:af:41:9e:f8:9e:26:b3:fc: e6:01:b3:6c:44:a4:a3:45:40:3a:6a:b7:94:ff:aa: d5:20:8c:fc:cd:87:2f:94:ea:8a:fe:8c:67:b3:83: e1:0e:11:5f:a7:d8:2e:b2:b4:4e:e1:8b:a3:c6:77: ec:1f:9d:6d:92:3b:4b:8a:90:74:d0:78:10:09:a1: f9:be:27:bd:a2:4a:40:72:a7:92:dc:b7:ed:b9:db: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AD:FF:35:29:25:15:71:AB:AD:04:9F:5B:0C:39:53:DD:EB:64:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.153.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3b:a2:61:5b:04:7e:46:ae:84:c0:b9:d0:7d:be:0d:a0:94: f7:f3:63:d6:7f:11:bd:55:81:11:de:e2:64:be:f3:02:28:ce: c6:3d:d2:f3:2e:03:40:dd:60:65:6f:58:5b:fc:34:55:16:cd: c1:84:6b:4c:3c:a0:1e:04:67:64:1b:99:35:23:bb:c6:7b:12: c3:30:9b:36:02:e5:f3:de:76:38:83:7f:8b:24:9c:e7:a3:88: 80:5d:d7:19:21:6b:ef:ca:2e:25:17:38:25:45:e1:02:e9:24: 85:07:7d:ea:15:42:e2:77:61:d2:f6:03:5f:17:c9:db:38:65: d4:79:6d:c6:e2:9a:4f:f0:47:ff:6c:2a:e0:ea:af:3e:b3:8f: c1:94:80:32:18:04:e0:a4:68:6a:fa:0a:c5:22:d8:9a:51:83: ee:69:32:6e:88:ff:43:53:66:f9:06:58:d9:c8:c9:20:99:83: c9:fc:96:51:52:a2:68:19:3b:a0:da:dc:e9:74:79:2a:78:2c: ba:e7:d8:b1:0e:ee:43:b9:b1:0e:32:e9:97:f9:77:2f:f2:69: cb:0b:f6:db:20:b4:91:eb:4e:4c:9f:22:c0:48:18:6c:ca:b2: d3:07:44:28:4b:b7:08:12:67:61:24:e0:9b:00:4b:d4:c4:3f: cb:d4:6f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUj05HfVaCcTOVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NWYyZmM2YzMtMmNiZC00MmE2LTkwNDgtYzkxYmMyOGJkOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBej7SF2NSx41ejKHRMBnwyAmgnlNdlbe2HS XlNvUtTkg1szu58o+k7xIbqqv+TGi2BmkAdBqqpyrwjsfTKnHnCDRCZ9goT/LML0 E7UlhuabhM1CtXNCcQpPfY9wGdHqhTRiw5WCEgwHQcgaenI3N6sb76fMgkYGeZFG hpCVUgSX44FEsUwkF4+mvyD+0K/Vs71vtx4dvpD+mMCxY87izfOBtLEdYvJBCDUT r0Ge+J4ms/zmAbNsRKSjRUA6areU/6rVIIz8zYcvlOqK/oxns4PhDhFfp9gusrRO 4YujxnfsH51tkjtLipB00HgQCaH5vie9okpAcqeS3LftudvzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFut/zUpJRVxq60En1sMOVPd62RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMWI3NjIyMzMtN2Y2Mi0z NTEwLTliMzMtODAwOWY0Yjg5MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJl+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC47omFbBH5GroTAudB9vg2glPfzY9Z/Eb1VgRHe4mS+8wIozsY90vMu A0DdYGVvWFv8NFUWzcGEa0w8oB4EZ2QbmTUju8Z7EsMwmzYC5fPedjiDf4sknOej iIBd1xkha+/KLiUXOCVF4QLpJIUHfeoVQuJ3YdL2A18Xyds4ZdR5bcbimk/wR/9s KuDqrz6zj8GUgDIYBOCkaGr6CsUi2JpRg+5pMm6I/0NTZvkGWNnIySCZg8n8llFS omgZO6Da3Ol0eSp4LLrn2LEO7kO5sQ4y6Zf5dy/yacsL9tsgtJHrTkyfIsBIGGzK stMHRChLtwgSZ2Ek4JsAS9TEP8vUb1M= -----END CERTIFICATE-----Generated at Sat Sep 5 06:30:10 2026 by rpki-client